Vendor
DEEBOT
Products
2
CVEs
3
Across products
6
Status
Private
Products
2- 3 CVEs
- 3 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-66404 | Med | 0.42 | 6.5 | 0.00 | Aug 10, 2026 | DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved. | ||
| CVE-2026-66411 | Med | 0.34 | 5.3 | 0.00 | Aug 10, 2026 | DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot. | ||
| CVE-2026-66408 | Med | 0.30 | 4.6 | 0.00 | Aug 10, 2026 | The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account. |
- risk 0.42cvss 6.5epss 0.00
DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.
- risk 0.34cvss 5.3epss 0.00
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.
- risk 0.30cvss 4.6epss 0.00
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.